CVE-2019-6188

published 2019-11-12

CVE-2019-6188: The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which…

Priority P3 49 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
lenovo	thinkpad_helix_firmware	< gfet65ww	gfet65ww
lenovo	thinkpad_s531_firmware	< gket46ww	gket46ww
lenovo	thinkpad_t440_firmware	< gjeta3ww	gjeta3ww
lenovo	thinkpad_t440p_firmware	< gleta0ww	gleta0ww
lenovo	thinkpad_t440s_firmware	< gjeta3ww	gjeta3ww
lenovo	thinkpad_t460p	>= unspecified < R07ET90W	R07ET90W
lenovo	thinkpad_t470p	>= unspecified < R0FET50W	R0FET50W
lenovo	thinkpad_t540p_firmware	< gmet89ww	gmet89ww
lenovo	thinkpad_w540_firmware	< gnet92ww	gnet92ww
lenovo	thinkpad_w541_firmware	< gnet92ww	gnet92ww
lenovo	thinkpad_x240_firmware	< giet98ww	giet98ww
lenovo	thinkpad_x240s_firmware	< giet98ww	giet98ww

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.